mohdhaji87 Goto Github PK

aspnetcoreclickjack

Asp.net core clickjacking mitigation by adding X-frame-options header in startup.cs

aws-cheatsheet

brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

coeia_webhacking_attacks-defense

This talk is about Application security topics such as SQLI, XSS , Command injection , CSRF, LFI, Oauth2.0 ,etc .. This talk focuses on both Attacks and defense in depth of Web application security. This talk is for both pentesters (different attacks techniques & bypasses) and Software Developers (defense in depth technique).

ctf-solutions

Solution to capture the flag conducted by me in CBIT college

ctfd

dependencyconfusion-checker

Checking dependency confusion for npm packages in public registry.

emailslister

This Python script fetches any organization member emails

escapeshellcommand

It's dangerous to trust user input , especially when you are using system() call. In php we can either disable the system call , or filter user input before passing argument to shell

facebook

This small project shows wheather the given url is in facebook's blacklisted url or not

framebursting

handouts

materials we hand out

owasp-summit-2017

Content for OWASP Summit 2017 site

securewebapp

Coded a secure php web application for learning purpose eliminating SQLI , Clickjacking, IDOR , Command Injection , CSRF , XSS ,LFI (null byte may be used to attack) vulnerabilities

security-code-scan

Static code analyzer for .NET

threat_modeling

Threat Modeling Resources

vulnerablewebapp

Coded a sample vulnerable web application for learning purpose..

xss-filter

Using php function designed a small code which eliminates xss (99%) , we can't say 100% there may be some bypass to this as well.

zendesk-automation

Python script to pull zendesk tickets data and send email as excel attachment